summaryrefslogtreecommitdiffstats
path: root/testing/web-platform/tests/css/css-layout-api/chrome-bug-1296664-crash.https.html
diff options
context:
space:
mode:
Diffstat (limited to 'testing/web-platform/tests/css/css-layout-api/chrome-bug-1296664-crash.https.html')
-rw-r--r--testing/web-platform/tests/css/css-layout-api/chrome-bug-1296664-crash.https.html18
1 files changed, 18 insertions, 0 deletions
diff --git a/testing/web-platform/tests/css/css-layout-api/chrome-bug-1296664-crash.https.html b/testing/web-platform/tests/css/css-layout-api/chrome-bug-1296664-crash.https.html
new file mode 100644
index 0000000000..9e523fb181
--- /dev/null
+++ b/testing/web-platform/tests/css/css-layout-api/chrome-bug-1296664-crash.https.html
@@ -0,0 +1,18 @@
+<!DOCTYPE html>
+<link rel="author" title="Morten Stenshorne" href="mailto:mstensho@chromium.org">
+<link rel="help" href="https://bugs.chromium.org/p/chromium/issues/detail?id=1296664">
+<div id="container">
+ <div style="position:relative; margin-top:8px;">
+ <div style="display:layout(foo); position:absolute; width:100px; height:100px;"></div>
+ <div style="column-span:all;"></div>
+ </div>
+ <span style="columns:1;">
+ <div style="display:flex;"></div>
+ <div style="display:grid;"></div>
+ <div style="display:table;"></div>
+ </span>
+</div>
+<script>
+ document.body.offsetTop;
+ container.style.columns = "1";
+</script>